When Microsoft ended support for Windows 10 on October 14, 2025, many businesses weren’t ready to move every computer to Windows 11. Some had machines that couldn’t meet Windows 11’s hardware requirements. Others relied on software that hadn’t been tested on the new system, or simply ran out of time and budget. For those organizations, Microsoft offered a safety net: the Windows 10 Extended Security Updates program, better known as Windows 10 ESU.
That safety net was always meant to be temporary, and the first year of it is about to run out. Windows 10 ESU Year One coverage ends on October 13, 2026. If your business still has Windows 10 computers in use, now is the time to decide what happens to each of them next.
In this post, we’ll explain what Windows 10 ESU covers, what changes when Year One ends, and the practical options your business has from here.
What Is Windows 10 ESU?
Windows 10 ESU is a paid program that lets businesses keep receiving security updates for Windows 10 after its official end of life. Microsoft designed it as a bridge, giving organizations extra time to finish moving to Windows 11 without leaving their computers completely unprotected in the meantime.
It’s important to understand what the program does and doesn’t include. Windows 10 ESU provides critical and important security updates. It does not include new features, non-security fixes, or general technical support for Windows 10. In other words, ESU keeps the locks on the doors working, but it doesn’t renovate the house. Your Windows 10 computers will stay frozen as they are today, while software vendors and hardware manufacturers continue to focus their attention on Windows 11.
There are also eligibility requirements. Computers must be running Windows 10 version 22H2, the final version of Windows 10, to receive ESU updates. Machines on older versions need to be updated before they can be enrolled.
Key Dates and Costs for Windows 10 ESU
Microsoft offers Windows 10 ESU for a maximum of three years after end of life. Each year is purchased separately, and each year has its own end date:
- Year One: ends October 13, 2026
- Year Two: ends October 12, 2027
- Year Three: ends October 10, 2028
After October 2028, there are no more security updates for Windows 10 under any program.
The cost structure is designed to encourage businesses to move on. For commercial organizations, Year One costs $61 per device, and the price doubles each year after that. That means Year Two costs $122 per device, and Year Three costs $244 per device.
There’s one more detail that catches some businesses off guard. Windows 10 ESU is cumulative, which means you can’t skip a year to save money. If your business didn’t enroll in Year One and wants coverage in Year Two, you’ll need to pay for Year One as well. Waiting doesn’t lower the bill. It just adds to it.
Why the End of Year One Matters
For businesses already enrolled, the end of Year One is a natural checkpoint. Continuing coverage means paying twice as much per computer for another year of the same limited protection. For businesses that never enrolled and have been running Windows 10 without security updates since October 2025, the situation is more urgent, because those machines have gone a full year without security fixes.
A computer that no longer receives security updates doesn’t stop working. It boots up, opens email, and runs your software just like it did before. That’s what makes the risk easy to overlook. Behind the scenes, though, every security weakness discovered in Windows 10 since support ended stays open on that machine. Cybercriminals know older systems are easier targets, and an unprotected computer on your network can become an entry point to everything else connected to it, including your files, your email, and your clients’ information.
There are other business concerns to consider as well. Cyber insurance applications may ask whether your systems are supported and kept up to date. Many clients and partners expect you to protect the data they share with you. And as software vendors shift their focus to Windows 11, the programs your team relies on every day may eventually stop supporting Windows 10.
Don’t Forget About Your Windows 11 Computers
If your business has already moved to Windows 11, there’s still a related date to keep an eye on this month. Windows 11 Home and Pro, version 24H2, also reaches the end of its servicing period in mid-October 2026. Computers on that version will need to move to a newer version of Windows 11, such as 25H2, to keep receiving security updates.
This is a good reminder that upgrading to Windows 11 isn’t a one-time project. Windows 11 receives a major update each year, and each version has its own support window. Keeping every computer on a supported version takes ongoing attention, which is one of the reasons many businesses choose to have a managed IT partner handle it.
Your Options From Here
Every business is different, and the right answer may not be the same for every computer in your office. Most organizations will use a combination of the following options.
1. Upgrade Eligible Computers to Windows 11
If a computer meets Windows 11’s hardware requirements, upgrading it is usually the most cost-effective long-term choice. The upgrade itself is free for eligible devices running a genuine copy of Windows 10. Before upgrading, it’s wise to confirm that your business-critical software works on Windows 11, back up important data, and plan the upgrade for a time that won’t disrupt your team.
2. Replace Computers That Can’t Run Windows 11
Some older machines simply can’t meet Windows 11’s requirements. For those computers, paying for ESU year after year often means spending more on an aging device that will need to be replaced anyway. Replacing them now lets you stop paying for ESU, gives your team faster and more reliable equipment, and puts those computers on a system that will receive updates for years to come. If budget is a concern, a phased replacement plan can spread the cost over time, starting with the machines that handle your most sensitive work.
3. Renew Windows 10 ESU for Year Two, With a Plan
Sometimes there’s a good reason to keep a Windows 10 computer a little longer. Perhaps it runs specialized software that hasn’t been certified on Windows 11 yet, or a replacement is already budgeted for next year. In those cases, renewing Windows 10 ESU for Year Two makes sense. The key is to treat it as a short, defined extension with a clear end date and a plan for what happens next, rather than an open-ended way to put off a decision.
4. Consider Cloud Desktops
Microsoft provides Windows 10 ESU at no additional cost for Windows 10 virtual machines running in certain Microsoft cloud services, including Windows 365 and Azure Virtual Desktop. For some businesses, especially those with remote or hybrid teams, moving certain users or applications to a cloud desktop can be a practical alternative to buying new hardware or paying for ESU. This option isn’t right for everyone, but it’s worth evaluating if your team already works from multiple locations.
A Practical Plan for the Next Few Weeks
With the end of Year One so close, here’s a simple way to organize your next steps:
- Take inventory. Identify every computer in your business that still runs Windows 10, including machines in conference rooms, at reception desks, and in remote employees’ homes.
- Check eligibility. Determine which of those computers can run Windows 11 and which can’t.
- Check your ESU status. Confirm which devices, if any, are currently enrolled in Windows 10 ESU and when their coverage ends.
- Assign a path to each computer. Decide whether each machine will be upgraded, replaced, renewed for Year Two, or moved to the cloud.
- Review your Windows 11 versions. Make sure computers already on Windows 11 are on a supported version.
- Document your decisions. Keep a record of what you decided and why. It will help with budgeting, cyber insurance questionnaires, and future planning.
Working through this list may feel like a lot to take on alongside running your business, and that’s completely understandable. The good news is that you don’t have to do it alone.
How Courant Can Help
At Courant, we’ve helped businesses across Greater New Orleans plan and manage technology changes like this one since 1997. We can help you find every Windows 10 computer in your organization, determine which machines can be upgraded and which need to be replaced, and build a transition plan that fits your timeline and budget. If you choose to keep some computers on Windows 10 ESU for another year, we can help you put a clear plan in place so that extension leads to a finish line.
Once your computers are on Windows 11, our managed IT services keep them that way, with ongoing updates, monitoring, and support so your team can focus on their work instead of worrying about the next deadline.
Plan Your Next Move Before October 13
Windows 10 ESU was always meant to buy time, and for many businesses, that time is running out. Whether you’re deciding between paying for Year Two, upgrading to Windows 11, or replacing older equipment, a clear plan now can save your business money and protect it from unnecessary risk.
If you’d like help sorting out which option makes sense for each computer in your office, schedule a free 15-minute consultation with our team. We’ll talk through where your business stands with Windows 10 ESU and what your next steps should be.
Prefer to send us a message first? Contact Courant and tell us a little about your computers and your timeline. We’ll help you move forward with confidence.
Note that the image at the top of this blog was created using Nano Banana Pro. Are you using generative AI?
